Know your vendors. Protect your data.
Factual vendor compliance data: certifications, subprocessors, DPAs, litigation history and AI governance. Structured once, accessible to everyone.
No credit card required ยท Free forever for vendors
24
18
21
14
| Vendor | Category | Score | Certifications | Status |
|---|---|---|---|---|
| Stripe | Payments | 9/9 | SOC 2ISO 27001 | Verified |
| Slack | Communication | 7/9 | SOC 2 | Verified |
| Notion | Productivity | 6/9 | SOC 2ISO 27001 | Pending |
| Hubspot | Marketing | 5/9 | SOC 2 | Pending |
Trusted by Fortune 500 CPOs. Leveraged by successful SaaS.
What you get
Everything you need to evaluate vendors
Transparency Scores
9-point factual scoring: certs, DPA, trust center, subprocessors, privacy policy, verified claims.
Subprocessor Chains
See who your vendors share data with down the chain. Oregon SB 619 & EDPB require it. We make it visible.
Privacy Litigation
Real US federal court cases from Seneca: BIPA, CCPA, ECPA lawsuits tied to each vendor.
AI Governance
EU AI Act roles, model inventories, bias monitoring and risk tiers. Know if a vendor is an AI system.
Vendor-Verified Data
Vendors claim their profile, complete a questionnaire once, and serve all future customers.
DPA Processing
We locate, catalog, and analyze vendors' published Data Processing Agreements against GDPR, CCPA, and US state law clauses.
Change Detection
Vendors revise DPAs and subprocessor lists without telling anyone. We re-check their published documents monthly and flag what changed, before it surprises your audit.
Subprocessor visibility
Follow the data chain
Oregon SB 619 & the EDPB require identifying all subprocessors down the chain. We give you full visibility, from your vendor to their sub-sub-processors.
Vendor profiles
Deep compliance data for every vendor
Certifications, subprocessors, litigation risk, AI governance indicators and transparency scores. All in one structured profile.
- Transparency score from 9 factual data points
- DPA compliance analysis across GDPR, CCPA & US state laws
- Subprocessor list with processing roles
- Privacy litigation data from US federal courts
- AI governance: EU AI Act roles & model inventory
- One-click executive report: certification coverage, DPA scores, data residency, AI inventory, and gaps across your portfolio
- Fourth-party concentration: see which providers sit beneath most of your vendors
- Filter the catalog by certification, EU data center, DPA availability, and verification status
Datadog
Monitoring and security platform for cloud applications, covering infrastructure, application performance, logs and security.
DPA Compliance
Certifications
Subprocessors
Data Locations
Compliance
Ecosystem
How it all connects
Build once, sync everywhere. Export up to 50 vendors at a time to DPO Central or AI Sentinel. Litigation data flows in automatically from Seneca.
VendorWatch
Vendor data transparency hub
DPO Central
Privacy compliance management
Seneca
Privacy litigation data from US federal courts
AI Sentinel
AI risk governance
How it works
From search to export in four steps
Browse & Add
Search 937+ enriched vendors. Add to your portfolio.
5 Free Reviews
Incomplete profiles reviewed by our team, with a 48-hour target. First 5 free.
Tag & Classify
Data categories, processing purposes, criticality level.
Export
Push up to 50 vendors at a time to DPO Central or AI Sentinel.
For vendors
Claim once. Serve every customer.
Show your AI governance on your terms. Declare the models behind your AI features, with provider, EU AI Act risk tier, and model cards, and your profile earns Transparent AI status. If your published subprocessor list names an AI provider but no models are declared, profiles show AI use as undisclosed. Transparency is self-serve, and it is free.
Claim your profile
Domain verification in seconds via Google OAuth or work email.
Complete your questionnaire
Certs, subprocessors, data locations and AI governance, structured once.
Build trust at scale
Verified badge, transparency score, visible to every business on the platform.
Expert verification
Beyond automation
Independent review, when a vendor asks for it.
Compliance Expert in the Loop
A qualified privacy professional reviews your compliance posture. Requested directly, never automatic.
Technical Claims Checked
Security controls, encryption and data architecture claims are checked against the vendor's documented evidence as part of the same review.
Published openly
A completed review is published as a public attestation on Comply.org, an open standard anyone can audit.